name: addideas-toolbox

services:
  toolbox:
    build:
      context: .
      dockerfile: Containerfile.release
      args:
        TOOLBOX_RELEASE_VERSION: "${TOOLBOX_RELEASE_VERSION:-0.9.0}"
        TOOLBOX_RELEASE_SHA256: "${TOOLBOX_RELEASE_SHA256:-fa3c5b8a4148dbb360acc04fd505a6fa64e06c5c842cf1334af5c7d232208f3c}"
    image: "git.add-ideas.de/zemion/toolbox:${TOOLBOX_RELEASE_VERSION:-0.9.0}"
    restart: unless-stopped
    read_only: true
    tmpfs:
      - /tmp:size=16m,mode=1777
      - /var/cache/nginx:size=16m,uid=101,gid=101
      - /var/run:size=1m,uid=101,gid=101
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    networks:
      - internal
    labels:
      traefik.enable: "true"
      traefik.docker.network: "${TRAEFIK_NETWORK:-internal}"
      traefik.http.routers.addideas-toolbox.rule: "Host(`${TOOLBOX_HOST:-toolbox.add-ideas.de}`)"
      traefik.http.routers.addideas-toolbox.priority: 900
      traefik.http.routers.addideas-toolbox.entrypoints: websecure
      traefik.http.routers.addideas-toolbox.tls: "true"
      traefik.http.routers.addideas-toolbox.tls.certresolver: "${TRAEFIK_CERT_RESOLVER:-netcup}"
      traefik.http.routers.addideas-toolbox.service: addideas-toolbox
      traefik.http.routers.addideas-toolbox-http.rule: "Host(`${TOOLBOX_HOST:-toolbox.add-ideas.de}`)"
      traefik.http.routers.addideas-toolbox-http.priority: 900
      traefik.http.routers.addideas-toolbox-http.entrypoints: web
      traefik.http.routers.addideas-toolbox-http.middlewares: addideas-toolbox-https-redirect
      traefik.http.routers.addideas-toolbox-http.service: addideas-toolbox
      traefik.http.middlewares.addideas-toolbox-https-redirect.redirectscheme.scheme: https
      traefik.http.middlewares.addideas-toolbox-https-redirect.redirectscheme.permanent: "true"
      traefik.http.services.addideas-toolbox.loadbalancer.server.port: "8080"

networks:
  internal:
    external: true
    name: "${TRAEFIK_NETWORK:-internal}"